Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e37332e302e302f31362d3136203d3e2034323330.roa
File:                     3230312e37332e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          u738oAt7KUlBjWUYPExhQ5zKNJhXUtF2Huz6AC9Q4oU=
Subject key identifier:   8B:43:2C:9E:E7:7A:AC:2A:EB:14:01:F4:2C:56:F5:6D:F0:72:71:48
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       6E6062267C11869B866EC778357D582A497362C5
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e37332e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 20:00:06 +0000
ROA not before:           Wed 04 Feb 2026 19:55:06 +0000
ROA not after:            Wed 03 Feb 2027 20:00:06 +0000
asID:                     4230
IP address blocks:        201.73.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:60:62:26:7c:11:86:9b:86:6e:c7:78:35:7d:58:2a:49:73:62:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 19:55:06 2026 GMT
            Not After : Feb  3 20:00:06 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f7:91:ca:03:23:f2:72:05:ad:3f:18:2c:00:
                    f8:1c:fa:94:88:18:75:fd:8b:90:ec:62:78:c2:30:
                    1d:29:82:a1:f7:22:40:9d:48:1f:81:ee:e8:04:78:
                    10:38:f8:97:f0:b8:34:00:9d:67:cc:12:5c:1e:c4:
                    93:28:1f:b5:b7:38:64:8c:60:bc:9e:62:d3:ce:cc:
                    88:20:a0:2f:be:3e:a0:17:56:53:6a:b2:94:4f:3e:
                    95:3e:4c:84:cf:62:b5:99:65:c0:cc:9b:ca:cf:f2:
                    34:a4:58:a3:96:a6:ae:2c:9e:c6:c2:25:61:a2:49:
                    d7:b3:15:36:48:e8:cf:16:6f:75:95:a6:90:57:69:
                    f4:ff:30:b8:28:1e:9d:32:ac:cb:94:e2:37:e1:c0:
                    33:f1:78:f0:00:42:39:52:22:39:45:03:3d:62:1c:
                    6b:7a:7d:bc:1f:5c:12:72:e6:00:e2:89:2b:16:44:
                    01:aa:8a:11:b8:78:e7:fc:e4:52:c0:7d:df:8a:cf:
                    ea:6c:a7:d9:a2:92:33:ec:26:e0:8a:8d:6b:d3:73:
                    61:6d:dc:6a:42:f0:b3:7b:4c:f5:06:8e:48:e8:ba:
                    c7:65:31:28:b4:26:7a:8e:5b:80:29:b8:98:63:67:
                    d4:8f:80:47:2f:58:c2:4a:99:98:b6:6b:f8:25:37:
                    f1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:43:2C:9E:E7:7A:AC:2A:EB:14:01:F4:2C:56:F5:6D:F0:72:71:48
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e37332e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.73.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8c:4b:3d:0c:5a:a3:62:69:8e:8c:67:37:09:30:cf:98:41:37:
         20:19:fe:a5:da:35:86:b9:17:51:12:10:b1:93:d7:63:ee:24:
         65:7b:0c:e6:f2:3c:b0:65:d2:0b:65:21:2e:55:5c:72:09:e9:
         f4:e8:98:da:54:fa:2d:ed:e6:0c:99:c7:97:9c:86:95:86:c5:
         c7:48:b1:9a:88:df:fe:19:7d:3c:39:1c:c6:f7:dc:6d:76:d6:
         cd:d6:40:dc:b8:1d:e7:24:db:d6:24:42:b0:71:08:e1:85:d1:
         72:28:18:af:bf:39:83:92:3d:85:57:87:ac:77:cd:63:09:db:
         3c:c0:bf:fd:c5:a3:64:a1:cb:c5:4d:3d:12:31:d3:9d:62:e6:
         a3:c4:14:43:87:16:50:6f:8f:52:9b:6e:a5:b2:98:dd:67:d8:
         47:f7:f9:7f:77:00:13:bd:7b:1a:1b:11:f3:1d:c5:d5:ee:fe:
         f1:3f:96:e1:ba:70:eb:f9:59:c6:f6:dc:ba:d9:38:69:07:ec:
         46:7f:51:0f:18:cd:22:be:5a:c8:27:c1:b0:b1:e2:98:d1:75:
         83:a4:ce:aa:39:54:1f:6a:5d:71:0c:92:95:25:8b:aa:27:eb:
         e6:96:c6:de:7f:d1:3a:f8:31:0f:f0:95:63:99:36:9b:d7:9e:
         4a:93:e5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:01:31 2026 by rpki-client